Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-10858 1 Zulip 1 Zulip Desktop 2024-11-21 5.3 Medium
Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler.
CVE-2020-10857 1 Zulip 1 Zulip Desktop 2024-11-21 9.8 Critical
Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.